KR20040092920A - Apparatus and method for processing a terminal authentication and a call in a private wireless high-speed data system - Google Patents

Abstract

PURPOSE: An apparatus and method for authenticating a terminal and processing a call in a private EV-DO are provided to reduce an unnecessary load in a public network DLR(Data Location Register) by processing a call in a private network DLR after obtaining essential session information from the public network DLR when a call is first connected. CONSTITUTION: An AT(Access Terminal) transmits a signal requesting access to a private EV-DO wireless network to a private ANTS(Access Network Transceiver System)(S301). The private ANTS routes the private network access request signal to a pANC(private Access Network Control)(S302). The pANC determines whether the call connection signal is for a private EV-DO wireless network access or for a public EV-DO wireless network access(S303). If the call connection request signal is the private EV-DO wireless network access request signal, the pANC provides a session information request signal(S305). A pDLR(private Data Location Register) determines whether session information for the AT has been stored in a database(S306). If there is no session information on the AT, the pDLR requests session information on the AT from a public DLR of a public EV-DO wireless network(S307). The public DLR searches the session information on the AT and transmits it to the pDLR(S308). The pDLR extracts terminal authentication information, namely, IMSI(International Mobile Station Identity) information, included in the received session information(S309). The pDLR compares the extracted IMSI information of the AT and IMSI information of private network ATs registered in its database(S310). If the IMSI of the AT has been registered in the database, the pDLR stores the session information in the database(S311) and transmits it to the pANC(S312). The pANC allocates a traffic channel to the AT and sets a service(S313), and then, registers at a pPDSN so as to be connected(S314).

Description

Apparatus and method for processing a terminal authentication and a call in a private wireless high-speed data system}

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a terminal authentication and call processing apparatus and a method thereof in a private wireless high speed data system. In particular, a wireless terminal of a wireless high speed data system (CDMA 1x EV-DO: hereinafter referred to as EV-DO) is a private (premises). Private wireless high-speed data that enables the terminal to perform on-premises EV-DO wireless network authentication and on-premises access call processing using session information of the corresponding terminal registered in the public EV-DO wireless network when connecting to the EV-DO wireless network. The present invention relates to a user authentication and call processing apparatus and a method thereof.

In general, the CDMA 1x EV-DO wireless network is a new packet wireless data transmission technology developed by Qualcomm using CDMA technology and enables high-speed mega-class data transmission. The transmission speed is also 2.4 Mbps in the forward direction and 307.2 Kbps in the reverse direction, which is implemented in the same wireless system as the ADSL method used in the wire.

The CDMA 1x EV-DO emerged as an IMT-2000 MC (Multi-Carrier, Synchronous) 1x RTT system developed to support both voice and data, but has been commercialized and tested, but transmits high-speed data in the 1.25 MHz band. Not only is there a limit to this, but since IS-95 does not support more than 144Kbps, it has emerged as a complementary solution for high-speed data transmission.

CDMA 1x EV-DO connects data-only internet via DCN (Data Core Network) in existing IS-95 network, and can support data transmission speed as same as existing speed in 3rd generation (3G) network.

The CDMA 1x EV-DO has an average forward data rate of several hundred kbps, but the radio frequency bandwidth used is 1.25MHz, the same as the cell phones used in current CDMA One.

Considering that 5MHz bandwidth is required to provide 384kbps service in IMT-2000, it can be said that the system has very high frequency utilization efficiency.

CDMA 1x EV-DO is designed in a way that is suitable for data communication that is not affected by delay or moment when the transmission data that can be accelerated to a bandwidth narrower than the frequency bandwidth of IMT-2000 is burst data such as the Internet. Because there is.

In addition, the CDMA 1x EV-DO performs a function of automatically adjusting the reverse transmission rate in the base station according to the call quality between the terminal and the base station. This function is possible by monitoring the signal of the terminal received from the base station every 1.67m / s to determine the call quality to adjust the priority and speed of data transmission to the terminal.

The terminal with less radio interference near the base station preferentially transmits at a higher transmission speed and improves the communication quality of data by reducing the communication speed to a terminal far from the base station.

A general wireless network is classified into a wireless public network and a wireless private network used by a group or company having a specific purpose, and the wireless private network is configured to interwork with a specific wireless public network, but the CDMA 1x EV-DO wireless network is different from the general wireless network. Otherwise, only public EV-DO wireless network service provided by mobile communication service provider existed, and private (premises) EV-DO wireless network service did not exist.

Accordingly, methods for using a part of public EV-DO wireless networks as private EV-DO wireless networks are being developed. This method allows one mobile terminal to provide a service of a private EV-DO wireless network in a specific area (premises), and to provide a service of a public EV-DO wireless network in other areas.

This method has been proposed through the applicant No. 10-2002-0054625 filed on September 10, 2002 (name of the invention: a common method and system for public and private networks in a wireless high-speed data system).

Briefly, the proposed method and system for using a public network and a private network in a wireless high-speed data system will be briefly described. Among the methods for implementing an on-premises EV-DO wireless network in an EV-DO network, a DLR and The following methods are suggested in constructing AN_AAA.

First of all, in case of DLR, it is possible to connect directly to public network DLR for the construction of premises network, or to install premises-only DLR inside premises network to handle premises network access.In addition, AN_AAA also authenticates premises network access like DLR. In order to deal with this problem, the public network AN_AAA was directly connected or an AN-AAA dedicated to the premises was installed in the premises.

However, the above methods have their advantages, but they have the following problems.

First, the method of sharing the public network DLR without having a separate internal network DLR results in an increase in the load placed on the public network DLR due to the provision of the internal network service from the mobile operator side. That is, even if the terminal used in the premises network is a terminal registered in the public network, the public network DLR is used due to the provision of new services because the public network DLR is used when accessing the premises network and other steps using the premises EV-DO wireless network. There is a problem that is increased.

The initial DLR design was designed with no on-site services in mind, so if the number of EV-DO wireless networks in the premises increased, there could be a problem that would affect the operation of the public DLR.

As a second method, in the premises network, a private DLR having the same function as the public network DLR is installed in the premises network, which causes a problem that the terminal in the premises does not respond to the public network paging request, and the premises EV-DO In the wireless network, the public network cannot be accessed, and the load of the public network DLR and the internal network DLR is increased due to frequent subnet changes.

In the third method, an AN_AAA is installed in the premises network for the authentication of the premises network, and the public network AN-AAA and the premises network AN-AAA are used for sharing the public network AN_AAA by accessing the public network AN_AAA through the premises network AN_AAA. There is a problem that a dedicated line is required for the connection between the two networks, and the selective access to the internal network is not intended.

In addition, there is a method of operating a private network dedicated AN_AAA for the network authentication, in this case, a high-performance dedicated AN_AAA server is required, which increases the cost of the facility according to the use of the server, and increases the operating cost required for server management. I'm having a problem.

Accordingly, the present invention has been made to solve the above problems according to the prior art, an object of the present invention, by installing a DLR in the premises network and connecting the premises network DLR and the public network DLR by a dedicated line for the first time from the premises network terminal If there is a call connection, the session information necessary for call processing is secured from the public network DLR, the acquired session information is stored in the premises network DLR, the call processing is performed, and there is a subsequent call connection from the premises network terminal. The present invention provides a terminal call processing apparatus and method in a private wireless high-speed data system capable of reducing unnecessary load on a public network DLR by performing call processing in the premises network itself according to session information stored in the premises network DLR.

Another object of the present invention is to extract an International Mobile Station Identity (IMSI) of a terminal included in session information obtained from a public network DLR in the local network DLR without installing AN_AAA for separate terminal authentication in the local network. The present invention provides a terminal authentication processing apparatus and a method in a private wireless high-speed data system capable of performing premises registered terminal authentication by comparing the extracted IMSI and IMSI of premises registered terminals.

1 is a diagram illustrating a network connection configuration with a public wireless high speed data system for implementing a terminal authentication and call processing apparatus in a private wireless high speed data system according to the present invention.

2 is a diagram illustrating a call processing process between a private network and a public network when a first call is connected in a private network in a method of terminal authentication and call processing in a private wireless high speed data system according to the present invention.

3 is a diagram illustrating a call processing process when a call is reconnected in a private network after the process of FIG. 2 (after the first private network connection attempt);

4 is a flowchart illustrating an operation of a terminal authentication and call processing method in a private wireless high speed data system according to the present invention.

* Description of the symbols for the main parts of the drawings *

100: public EV-DO network 200: private EV-DO network

110, 210: terminal 120, 120a, 120b, 220: ANTS

130, 130a: ANC 140: GAN

150: BSM 160: DLR

170; AN_AAA 180: PDSN

230: pANC 240: pDLR

250: WSM 260: pPDSN

According to an embodiment of a terminal authentication and call processing apparatus in a private wireless high-speed data system according to the present invention for achieving the above object, EV-DO wireless data in the premises connected to a public EV-DO wireless network system including a DLR An premises EV-DO wireless network system providing a service, comprising: relay means for relaying a received call connection request signal when a call connection request signal is received from a terminal entering the premises EV-DO wireless network; When the call connection request signal relayed from the relay means is the first call connection request signal, a session information request signal is generated for the corresponding terminal, and session information received when session information corresponding to the requested session information request signal is received. Call processing means for allocating a traffic channel with the access terminal to perform call processing; After requesting the session information request signal of the terminal generated from the call processing means to the public network DLR in the public EV-DO wireless network, and extracting the authentication information of the terminal included in the session information of the terminal received from the public network DLR, If the extracted authentication information is authentication information of a terminal registered in the premises EV-DO wireless network, session information processing means for storing the received session information of the corresponding terminal in a database and then providing the session information to the call processing means. It may include.

The authentication information is IMSI (International Mobile Station Identity).

The session information processing means may be connected to the DLR of the public EV-DO wireless network by a dedicated line. ,

If the connection call of the terminal received through the relay means is at least two reconnection calls, the session information processing means does not request the session information of the terminal to the public DLR of the public EV-DO wireless network. Instead, the session information of the corresponding terminal stored at the first call connection to the database in the session information processing means is provided to the call processing means without performing a separate terminal authentication process.

The terminal is connected to the public EV-DO wireless network, whether the call is a connection for connecting the public EV-DO wireless network to a call connection request signal transmitted to a relay means when the call is connected to the local EV-DO wireless network. It may include a temporary identifier information generation unit for adding the temporary identifier information for distinguishing the connection call.

The call processing means determines whether the terminal access call is an on-premises EV-DO radio network access call or a public EV-DO radio network access call according to the temporary identifier information included in the call connection request signal transmitted from the terminal through the relay means. It may include a routing module for routing the connection call to the premises EV-DO wireless network or public EV-DO wireless network according to the determination result.

If a call channel is allocated to the traffic channel with the terminal from the call processing means, the data packet service node for serving data through the intranet in the premises EV-DO wireless network to the terminal through the call processing means; Can be.

Meanwhile, according to an embodiment of a terminal authentication and call processing method in a private wireless high speed data system, an on-premises base station, an on-premises control station, and an on-premises data location register interoperating with a public EV-DO wireless network system including a public data location register is provided. In the call processing and terminal authentication method of the on-premises EV-DO wireless network system, when the call connection request is received from the terminal entering the premises EV-DO wireless network, the premises base station is connected to the call of the terminal Transmitting a request signal to the premises control station; Requesting, by the premises control station, session information of a terminal for call processing of the terminal to the premises data location register according to a call connection request signal transmitted from the premises base station; The premises data location register determines whether the session information requested from the premises control station is registered in the database. If the session information of the corresponding terminal is not registered, the premises data location register determines that it is the first premises EV-DO wireless network access call. Requesting session information of a terminal from a public data location register of the public EV-DO wireless network, and receiving session information of the corresponding terminal from the public data location register; The premises data location register performs premises authentication of the terminal using the authentication information included in the session information of the received terminal, and if it is determined that the terminal is a terminal registered in the premises, the session information of the terminal is received. Transmitting to the premises control station and storing the session information in a database; The premises control station may include allocating a traffic channel of the terminal according to session information of the terminal transmitted from the premises data location register and performing data service through the assigned channel.

In the step of transmitting the call connection request signal to the premises control station, when the terminal transmits the call connection request signal to the premises base station whether the call is a public EV-DO radio network access call in the premises EV-DO wireless network Temporary identifier information for identifying whether the call is a connection is added and transmitted.

The requesting session information of the terminal to the premises data location register may include: requesting a corresponding call connection request according to an analysis result by analyzing the temporary identifier information included in the call connection request signal transmitted from the terminal to the premises base station; And optionally routing the signal to a public location EV-DO wireless network or to a data location register of the premises EV-DO wireless network.

In the step of receiving session information of the corresponding terminal from the public data location register, the on-premises data location register, if the session information requested from the premises control station is registered in the database, the call connection of the terminal is the first call connection; If not determined to be at least two or more times the access call provides the session information of the terminal stored in the database to the control station without a separate terminal authentication. Here, the authentication information includes an international mobile station identity (IMSI).

According to another embodiment of a terminal authentication and call processing method in a private wireless high-speed data system, a terminal authentication and call processing method of an on-premises EV-DO wireless network system interworking with a public EV-DO wireless network system including a public data location register If the call connection request from the terminal entering the premises EV-DO wireless network, Determining whether the call connection of the end of the premises EV-DO wireless network connection call or public EV-DO wireless network connection call; If the call is an on-premises EV-DO wireless network access call, comparing and searching for whether session information for the terminal exists in a database; Requesting, by the public data location register located in the public EV-DO wireless network, session information of the terminal for authentication and call processing of the terminal, if the session information of the corresponding terminal does not exist in the database. ; If session information of the corresponding terminal is received from the public data location register, extracting IMSI information for authentication of the terminal included in the received session information of the corresponding terminal; Determining whether the extracted IMSI information is IMSI information of a terminal registered in an EV-DO wireless network and performing premises authentication of the corresponding terminal; When the authentication of the terminal is completed, storing the session information of the terminal in a database, assigning a traffic channel of the terminal using the session information of the terminal and performing a data service to the terminal through the assigned channel It may include.

In the step of comparing and searching whether the session information for the terminal exists in the database, if the session information for the terminal exists in the database, it is determined that the connection call of the terminal is at least two times the connection call of the separate terminal It may include the step of assigning a traffic channel of the terminal using the session information of the terminal stored in the database without authentication, and performing a data service to the terminal through the assigned channel.

Hereinafter, a preferred embodiment of a terminal authentication and call processing apparatus and a method thereof in a private wireless high speed data system according to the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram illustrating a network connection configuration between a private wireless high-speed data system (premises EV-DO wireless network) and a public wireless high-speed data system (public EV-DO wireless network) according to the present invention. The configuration of the public EV-DO wireless network 100 and the private EV-DO wireless network 200 will be described separately.

First, as shown in Figure 1, the terminal (AT: Access Terminal) 110 of the public EV-DO wireless network 100 in the public EV-DO wireless network 100 and on-premises EV-DO wireless network 200 The terminal can be used in common, and the terminal 210 in the premises EV-DO wireless network 200 is also a terminal registered in the public EV-DO wireless network 100 and can also be commonly used in the premises EV-DO wireless network 200. It can be a terminal.

In addition, the ANTS (Access Network Transceiver System, 120, 120a, 120b) in the public EV-DO wireless network 100 has predetermined public wireless areas, respectively, and a session when a terminal in the area enters. It performs a necessary operation at the time of assigning the identifier (UATI: Unicast Access Terminal Identifier) required for the AT (110). In addition, the ANTS 120, 120a, and 120b allow the call to be received to the AT 110, or when a call connection request is received from the AT 110, the ANTS 120, 120a, and 120b transmits a call connection request signal to the ANC (Public Control Station: Access Network Control). , 130a).

The ANCs 130 and 130a are respectively connected to a GAN (Hub: Global Area Network) 140, and the GAN 140 is an AN_AAA (private authentication system, Access Network Authentication Accounting) that is responsible for public network authentication, public network terminal authentication, and the like. Authorization: 170), PDSN (Packet Data Serving Node: 180) for performing Internet service on the terminal, DLR (Data Location Register: 160) for storing the information of the terminal, the location information of the terminal and loading, failure of the system, Base System Manager (BSM) 150, which is in charge of diagnosis and statistics, is connected to perform data relay between nodes. In addition, ANTS (120, 120a, 120b) of the public EV-DO wireless network 100 may be connected to the GAN 140, which is not shown in FIG.

The PDSN 180 may be connected to other packet service nodes through the Internet, or may be connected to the pPDSN 260 of the premises EV-DO wireless network 200, but this is not illustrated.

The DLR 160 stores information (eg, MN ID (IMSI) information) and location information about the terminals 110 and 210 registered in the public EV-DO wireless network 100, and the session of the terminal. At the time of updating, information of the terminals 110 and 210 is provided. In addition, the DLR 160 also stores information of a terminal included in a general wireless public network. Here, the terminal information of the general wireless public network may include at least one of information of the terminal, user information, and service grade information.

Meanwhile, the ANTS 220 in the premises EV-DO wireless network 200 provides an incoming call to the AT 210 entering the premises or transmits a call connection signal to the pANC (premises) when a call connection is made from the terminal 210. Control station: Private Access Network Control (230).

The pANC 230 distinguishes whether the originated data call is an outgoing signal for accessing the public network or an outbound network using an identifier included in the data call originated from the AT 210, and is a public network access outgoing signal. In the case of routing to the ANC 130 of the public EV-DO wireless network 100, if the outgoing signal is an internal network connection outgoing router router for routing the outgoing signal to process the call in the premises network EV-DO wireless network 200 A module (hub) may be provided.

The router module has a predetermined specific server address. This server address is compared with the information of the temporary identifier, when a temporary identifier address having a specific server has a call request to a predetermined temporary identifier terminal, it is detected as a call within the premises EV-DO wireless network 200 and the corresponding call is pANC (230). ).

For example, the temporary identifier of the subscriber in the premises EV-DO wireless network 200 is assigned to have a predetermined server address. If the predetermined server addresses are, for example, a server of "samsung.co.kr", a "samsung.com" DML server, and the like, the terminal 210 in the premises EV-DO wireless network 200 is "111@samsung.co". .kr ".

In this way, the AT 210 in the premises EV-DO wireless network 200 is required to connect to one of predetermined server addresses or a terminal having the above-described server, for example, "aaa@samsung.co.kr". When a call connection is requested to a terminal of the UE, the call is detected as a call in the private EV-DO wireless network 200.

If either the server included in the temporary identifier of the AT 210 requesting the call and the temporary identifier server of the server requesting the call or the terminal requesting the call are not predetermined addresses, the call is sent to the public EV. It is determined as a connection call of the DO wireless network 100 and routed to the ANCs 130 and 130a of the public EV-DO wireless network 100.

The pANC 230 including the router module stores the location of the AT AT 210 and other authentication information, and provides necessary information for call processing when a call is connected from the EV-DO terminal AT 210 in the premises. The pDLR 240 is connected to perform authentication of the premises EV-DO terminal AT 210 using the stored terminal authentication information (IMSI).

In addition, the pANC 230 is connected to the premises EV-DO terminal AT 210 is connected to the pPDSN 260 for providing Internet services through an intranet, the loading of the premises EV-DO wireless network 200 system, The WSM 250 is in charge of faults, diagnostics, statistics and the like. Here, the network components of the premises EV-DO wireless network 20 is similar in nature and function to the components used in the public EV-DO wireless network 100.

However, unlike the public network DLR 160, the pDLR 240 of the premises EV-DO wireless network 200 performs several different functions for supporting the premises network. In particular, the premises DLR pDLR 240 is premises. The terminal authentication function is performed so that a separate AN_AAA device is not used.

An operation of the premises EV-DO wireless network system interworking with the public EV-DO network system according to the present invention configured as described above will be described in detail.

First, the premises EV-DO wireless network 100, as shown in Figure 1, adds a pANC 230 between the public network ANTS 120 and the public network ANC 130, the network element required for the EV-DO service It is configured by adding

One of the important functions of the pANC 230 is to transfer various messages coming from the premises ANTS 220 into the public EV-DO wireless network 100 and the premises EV-DO wireless network 200. This is the router module in pANC 230 as described above.

For example, when the EV-DO wireless terminal AT 210 located in the premises EV-DO wireless network 200 attempts to connect to the public EV-DO wireless network 100, the pANC 230 may use the ANTS (premise ANTS). Recognizing the identifier (delimiter) included in the message transmitted by the 220 to transmit the message to the public network ANC (130) to be able to access the public EV-DO wireless network.

In addition, when the terminal AT 210 attempts to access the premises EV-DO wireless network 200, the same as in the public network, the pANC 230 checks the delimiter included in the message transmitted from the premises ANTS 220, and checks the pANC ( 230 to support the EV-DO wireless network 200 services in the premises using a network element installed in the premises. For reference, an identifier capable of distinguishing the premises EV-DO wireless network 200 and the public EV-DO wireless network 100 is provided from the EV-DO wireless terminal AT 210.

In the premises EV-DO wireless network 200 to provide the premises EV-DO wireless network 200 services while maintaining the session established in the public EV-DO wireless network 100 in the premises EV-DO wireless network 200 as it is. The benefits of doing so are:

First, the terminal AT 210 in the premises EV-DO wireless network 200 may respond to the public network paging, and processing may not occur due to a subnet change, thereby preventing a load increase of the public network DLR. will be.

In addition, since all operations related to initial session establishment are performed outside the premises EV-DO wireless network 200, the pDLR 240 function of the premises DLR can be implemented more easily in preparation for the public network DLR 160.

In addition, in configuring the pDLR 240 in the premises EV-DO wireless network 200, it is possible to implement a pDLR 240, a premises DLR, by using a less expensive server than the public network DLR 160, premises terminal AT (210) The certification results from the public network can be used without any separate AN-AAA premises.

As a result, in the premises EV-DO wireless network 200, the work related to the establishment and deletion of sessions occurring in the public EV-DO wireless network 100 does not occur, but for the basic call processing, the session in the pDLR 240, the premises DLR, is performed. In order to solve this problem, in order to solve this problem, a public pDLR 240 having a slightly different function from the public network DLR 160 is applied.

However, since the on-premises pDLR 240 does not contain any necessary data at the beginning of operation, the data may be arbitrarily input by the on-premises EV-DO wireless network manager 100, but specific data may be input to the public network DLR 160. Information must be available. Although the terminal AT 210 is located in the premises, the session creation of the AT 210 is performed through the public network DLR 160, and most of the information necessary for call processing is also stored in the public network DLR 160. to be.

Therefore, general premises EV-DO wireless network 200 call processing is performed by using the premises pDLR 240 and the necessary information from the public network DLR 160 for the necessary information to obtain premises EV-DO call processing Is carried out. As a result, in order to request and receive necessary data stored in the public network DLR 160 in the premises pDLR 240, the premises pDLR 240 and the public network DLR 160 should be connected by a dedicated line.

In the case of the on-premises terminal authentication through the on-premises EV-DO wireless network 200, there are some problems when providing the on-premises EV-DO wireless network 200 service by maintaining a session established in the public EV-DO wireless network 100. Occurs. The problem here is whether or not to perform authentication work on the terminal at any time.

In case of the AT 210 registered in the public network, there is no problem because authentication work for the corresponding terminal is performed through the public network AN-AAA 170 following the session setup process when establishing a session of the terminal. Since the session setup and release operations are not performed in the wireless network 200, when the premises EV-DO wireless network 200 is configured, authentication work through the public AN-AAA 170 is not performed in the call processing step. do. That is, since authentication through the public AN-AAA 170 is performed at the time of initial session setup and session release, a new session cannot be performed at the stage of simply accessing the network.

Eventually, in the premises EV-DO wireless network 200, when the connection to the premises EV-DO wireless network 200, not the session establishment step, the authentication for the corresponding terminal, that is, EV licensed for use in the premises EV-DO wireless network 200 You should check whether it is a DO terminal.

In the premises EV-DO wireless network 200, basic information related to the session is required in the premises pDLR 240 for basic call processing, and this information is obtained from the public network DLR 160 connected by a dedicated line. The AT 210 authentication is performed inside the premises pDLR 240 when the public network DLR 160 passes the session information to the premises pDLR 240 by the premises pDLR 240.

The session information transmitted by the public network DLR 160 contains various types of information. Among them, a terminal that is not registered in the premises is trying to access the premises EV-DO wireless network 200 by using information necessary for premises authentication. At this time, authentication of the premises terminal AT 210 is not allowed so that the message of the next step is not transmitted in the call processing step.

That is, authentication of the premises AT 210 is made in the premises pDLR 240 when the public network DLR 160 passes the session information to the premises pDLR 240 by the premises pDLR 240. The session information transmitted by the public network DLR 160 includes various types of information, including MNID (or IMSI: International Mobile Station Identity), which is essential for premises authentication.

IMSI is almost the same as 3G's Mobile Identification Number (MIN). The public network AN_AAA (170) is the IMSI value that informs the terminal that is finally authenticated after completing the session setup and the terminal authentication, since this value is already registered in the public network DLR (160), the public network in the premises pDLR (240) The IMSI value received from the DLR 160 is compared with the IMSI value of the premises registration terminal (terminal that can be used in the premises) stored in the premises pDLR 240 in advance.

As a result of the comparison, if the IMSI value of the terminal is the IMSI value registered in the EV-DO wireless network 200, the call processing process is normally performed, otherwise the next step message is not transmitted to the terminal. It is to authenticate the premises terminal.

A user authentication processing method in a private wireless high-speed data system according to the present invention corresponding to the above operation, with reference to the accompanying drawings for the call processing and authentication method of the terminal in the premises EV-DO wireless network 200. Let's explain step by step.

2 is a view illustrating a call processing process between a private network and a public network when a first call is connected in a private network in a private wireless high speed data system according to the present invention. A diagram illustrating a call processing process when a call is reconnected in the premises EV-DO wireless network 200 of the premises EV-DO wireless network after the first call connection attempt.

First, as shown in FIG. 2, when the wireless terminal AT 210 entering the premises EV-DO wireless network 200 makes a first call connection request to the premises EV-DO wireless network 200, the wireless terminal AT 210 transmits a request signal for requesting connection to the premises EV-DO wireless network 200 to the premises ANTS 220 (S101).

The premises ANTS 220 routes the premises network connection request signal transmitted from the AT 210 to the premises pANC 230 through the router 225 (S102 and S103).

The premises pANC 230 provides a session information request signal for requesting session information required for the premises network connection to the premises pDLR 240 according to the premises network connection request signal of the AT 210 routed through the router 225. (S104). However, in the premises pDLR 240, when the AT 210 first requests a connection, session information about the AT 210 is not stored.

In the existing DLR call processing, if the session information for the corresponding terminal does not exist in the DLR, a message is sent to the public ANC 130 that does not exist, and a process for opening a new session is started. However, in the premises EV-DO wireless network 200, the modification of call processing is necessary because the premises EV-DO wireless network 200 service must be provided while maintaining the public network session granted to the AT 210 without releasing it. It is necessary.

Therefore, if the session information for the terminal AT 210 is not stored in the database, the premises pDLR 240 transmits the session information request message received from the pANC 230 to the public network DLR 160 as it is ( S105).

The public network DLR 160 searches for session information of the corresponding terminal AT 210 requesting a network connection stored in its database according to the session information request message transmitted from the premises pDLR 240 and transmits the session information to the premises pDLR 240. (S106).

The pDLR 240 receives the session information of the access requesting terminal AT 210 received from the public network DLR 160 and performs authentication of the AT 210 using IMSI information included in the received session information. When this is completed, after storing the received session information of the AT 210 in its own database, the session information is provided to the premises pANC 230 (S107). That is, the pDLR 24 extracts the IMSI value from the session information before storing the session information of the AT 210 received from the public network DLR 160 in its database, and then stores the IMSI values of the preregistered premises terminals. Will be compared with. If the corresponding IMSI value is the IMSI of the premises registration terminal, the session information received from the public network DLR 160 is stored in the internal pDLR 240 internal database, and the remaining call processing is performed, but the same IMSI value is set to pDLR ( If it is not present inside, it determines that the AT 210 is not registered in the premises EV-DO wireless network 200 and stops the call processing process without storing the session information received from the public network DLR 160 in the database. Will be done.

As a result, the call processing proceeds from the initial connection to the non-registered AT 210 of the premises EV-DO wireless network 200.

As described above, in step S107, if the IMSI value in the session information received from the public network DLR (160) has a matching IMSI value among the IMSI of the premises registered ATs stored in the premises pDLR 240, that is, corresponding AT ( If the 210 is a terminal registered in the premises EV-DO wireless network 200, the premises pANC 230 uses the session information of the access request terminal AT 210 transmitted from the premises pDLR 240 to the corresponding terminal AT ( The traffic channel is allocated to the 210 to perform a call connection with the terminal AT 210 through the allocated channel (S108).

When the call connection is made through the allocated channel as described above, the premises pANC 230 registers the corresponding terminal AT 210 with the premises pPDSN 260 to perform data service through the intranet (S109).

As such, after the initial call connection of the terminal AT 210 entering the premises EV-DO wireless network 200 is made, the call processing process is briefly described with reference to FIG. 3. do.

First, when the wireless terminal AT 210 entering the premises EV-DO wireless network 200 requests a reconnection to the premises EV-DO wireless network 200, the wireless terminal AT 210 moves to the premises ANTS 220. A request signal for requesting access to the premises EV-DO wireless network 200 is transmitted (S201).

The premises ANTS 220 routes the premises network connection request signal transmitted from the AT 210 to the premises pANC 230 through the router 225 (S202 and S203).

The premises pANC 230 provides a session information request signal for requesting session information required for the premises network connection to the premises pDLR 240 according to the premises network connection request signal of the AT 210 routed through the router 225. (S204).

The pDLR 240 retrieves the session information of the terminal AT 210 stored in the database according to the request of the pANC 230, and transmits the retrieved session information to the pANC 230 (S205).

Accordingly, the premises pANC 230 allocates a traffic channel to the corresponding terminal AT 210 by using the session information of the access requesting terminal AT 210 transmitted from the premises pDLR 240, and transmits the terminal AT 210 through the assigned channel. Call connection with) will be performed (S206).

When the call connection is made through the allocated channel as described above, the premises pANC 230 registers the corresponding terminal AT 210 with the premises pPDSN 260 to perform a data service through the intranet (S207).

As a result, the call processing process when the terminal AT 210 entering the premises EV-DO wireless network 200 is reconnected after the initial call connection is almost similar to the process of FIG. Since session information of the AT 210 is stored in the premises pDLR 240, the session information stored in the pDLR 240 in the premises EV-DO wireless network 200 is not required without requiring the session information back to the public network DLR 160. To proceed with the call processing process. At this time, the authentication process of the AT 210 is because the authentication process at the time of the first call connection is a separate authentication process is not made.

A method of terminal authentication and call processing in a private wireless high speed data system including the call processing shown in FIGS. 2 and 3 will be described with reference to FIG. 4.

4 is a flowchart illustrating an operation of a terminal authentication and call processing method in a private wireless high speed data system according to the present invention.

First, as shown in FIG. 4, when the wireless terminal AT entering the premises EV-DO wireless network has a call connection request to the premises EV-DO wireless network, the wireless terminal AT is the premises ANTS to the premises EV-DO wireless network. A request signal for requesting a connection is transmitted (S301).

The premises ANTS routes the premises network connection request signal transmitted from the AT to the premises pANC through the router (S302).

The premises pANC determines whether the call access signal connected through the ANTS is a call signal for access to the premises EV-DO radio network or a public EV-DO radio network access call access signal (S303). Here, the determination of whether the access call from the AT is an on-premises EV-DO radio network access call or a public EV-DO radio network access call is determined by the identifier UATI included in the call connection request signal transmitted from the AT.

As a result, when the call connection signal is a public EV-DO wireless network access call signal, the call connection request signal is routed to the public network ANC so that the public call can be processed by the public EV-DO wireless network (S304).

However, if the call connection request signal of the AT is the premises EV-DO wireless network connection request signal, the premises pANC requests session information required for the premises network connection to the premises pDLR according to the AT network connection request signal of the AT routed through the router. In step S305, a session information request signal is provided.

The premises pDLR determines whether session information about the call connection request terminal AT requested from the premises pANC is stored (registered) in the database (S306).

As a result, if there is no session information of the AT requesting access to the database in the premises pDLR, it is determined that the first attempt is made to access the premises EV-DO wireless network. The session information of the terminal is requested to the DLR (S307). That is, in the premises pDLR, when the AT first requests access, since the session information for the AT is not stored, the session information of the AT is requested to the public DLR.

Subsequently, the public network DLR searches for session information of the corresponding AT requesting a network connection stored in its database according to the session information request message transmitted from the premises pDLR and transmits the session information of the AT to the premises pDLR (S308).

The pDLR receives session information of the access request terminal AT received from the public network DLR, and extracts terminal authentication information, that is, IMSI information, included in the received session information (S309).

Subsequently, the pDLR compares the extracted IMSI information of the AT and the IMSI information of the local network registration ATs registered in its database to determine whether the corresponding IMSI information is registered in the database (S310).

As a result of determination, if the IMSI of the access AT is not the IMSI registered in the pDLR database, call processing stops and a message about stopping call processing is transmitted to the AT.

However, if the IMSI of the access AT is the IMSI registered in the pDLR database, the AT is determined to be an AT registered in the EV-DO wireless network in the premises, and the session information transmitted from the public network DLR is stored in the database of the pDLR. After that (S311), the session information is transmitted to the premises pANC (S312).

Therefore, the premises pANC allocates a traffic channel with the terminal AT using the session information of the access request AT transmitted from the premises pDLR and sets up a service, and then registers and accesses the pPDSN of the premises EV-DO wireless network. It is to perform the required data service (S313, S314).

On the other hand, in the step S306, when the session information for the call connection request AT requested from the premises pANC is stored in the database of the premises pDLR, that is, the terminal is connected to the premises EV-DO wireless network at least twice If performed, the session information of the AT stored in the database of the premises pDLR is transmitted to the premises pANC (S312). Here, when AT is initially connected to the premises EV-DO wireless network, session information about the AT is received from the public DLR and stored in the premises pDLR. Therefore, the session information of the AT is not received again by the public DLR during a subsequent call connection. Instead, call processing is performed by the EV-DO wireless network in the premises by using session information of the AT stored in the premises pDLR.

Therefore, the premises pANC allocates a traffic channel with the corresponding terminal AT by using session information of the access requesting terminal AT transmitted from the premises pDLR and proceeds with call processing necessary for access (S313 and S314).

As a result, in the private wireless high-speed data system according to the present invention, the terminal authentication and call processing apparatus and method thereof include an on-premises pDLR installed in the premises EV-DO wireless network to handle authentication and call processing of the premises network entry terminal. Only when the terminal entering the DO wireless network requests the first call connection, the session information of the terminal is received from the DLR of the public EV-DO network, stored in a database in the pDLR in the premises, and call processing and authentication are performed.

In the authentication, it is determined whether the IMSI extracted by extracting the IMSI of the terminal included in the session information of the corresponding terminal is not registered in the pDLR database of the EV-DO wireless network. It is determined to perform authentication of the terminal.

When call access is required at least twice from a terminal entering the premises network, the call processing is performed using session information on the corresponding terminal stored in the premises pDLR without a separate authentication process.

In the private wireless high-speed data system according to the present invention as described above, the terminal authentication and call processing apparatus and method thereof secure session information necessary for call processing from a public network DLR when a first call is connected, and then call processing is performed on the internal network DLR. Because it can be handled by the on-premises EV-DO wireless network configuration has the effect of reducing unnecessary load on the public network DLR side.

In addition, because the on-premises DLR performs minimum functions, that is, functions related to session establishment and release, are performed by the public network DLR, and only the remaining functions are performed on the on-premises DLR. It can have.

In addition, only the pDLR in the premises supports the DLR function and the terminal premises authentication function at the same time, so that premises terminal authentication can be performed without purchasing a separate AN_AAA server. It has the effect of reducing the operating expenses required.

Claims (14)

In the premises EV-DO wireless network system that is linked to the public EV-DO wireless network system including a DLR to provide the EV-DO wireless data service in the premises, Relay means for relaying the received call connection request signal when a call connection request signal is received from a terminal entering the premises EV-DO wireless network; When the call connection request signal relayed from the relay means is the first call connection request signal, a session information request signal is generated for the corresponding terminal, and session information received when session information corresponding to the requested session information request signal is received. Call processing means for allocating a traffic channel with the access terminal to perform call processing; After requesting the session information request signal of the terminal generated from the call processing means to the public network DLR in the public EV-DO wireless network, and extracting the authentication information of the terminal included in the session information of the terminal received from the public network DLR, If the extracted authentication information is authentication information of a terminal registered in the premises EV-DO wireless network, session information processing means for storing the received session information of the corresponding terminal in a database and then providing the session information to the call processing means. Terminal authentication and call processing apparatus in the premises EV-DO wireless network system interworking with the public EV-DO wireless network comprising a. The method of claim 1, The authentication information is a terminal authentication and call processing device in an on-premises EV-DO wireless network system that interoperates with a public EV-DO wireless network including an IMSI (International Mobile Station Identity). The method of claim 1, The session information processing means, Terminal authentication and call processing apparatus in the premises EV-DO wireless network system that is interlocked with the public EV-DO wireless network configured by connecting the DLR of the public EV-DO wireless network with a dedicated line. The method of claim 1, If the connection call of the terminal received through the relay means is at least two or more reconnection calls, the session information processing means, The session information of the terminal is stored in the first call to the database in the session information processing means without requesting session information of the terminal from the public DLR of the public EV-DO wireless network without performing a separate terminal authentication process. A terminal authentication and call processing apparatus in an premises EV-DO wireless network system interoperating with a public EV-DO wireless network providing session information to the call processing means. The method of claim 1, The terminal, When a call is connected to the premises EV-DO wireless network, the call connection request signal transmitted to the relay means indicates whether the call is a connection call for connecting to the public EV-DO wireless network or a connection call for accessing the EV-DO wireless network in the premises. An on-premises EV-DO wireless network system interoperating with a public EV-DO wireless network including a temporary identifier information generation unit for adding temporary identifier information for identification. The method according to claim 1 or 5, The call processing means, Based on the temporary identifier information included in the call connection request signal transmitted from the terminal to the relay means, it is determined whether the terminal access call is an on-premises EV-DO wireless network access call or a public EV-DO wireless network access call. According to the premises EV-DO wireless network system interlocked with the public EV-DO wireless network including a routing module for routing the connection to the premises EV-DO wireless network or public EV-DO wireless network. The method of claim 1, And a data packet service node for providing data through an intranet in the premises EV-DO wireless network to the corresponding terminal through the call processing means when a traffic channel with the corresponding terminal is allocated from the call processing means. On-site EV-DO wireless network system interworking with the public EV-DO wireless network. In the call processing and terminal authentication method of the premises EV-DO wireless network system including the premises base station, premises control station, premises data location register interoperating with the public EV-DO wireless network system including the public data location register, When the call connection request is received from the terminal entering the premises EV-DO wireless network to the premises base station, transmitting the call connection request signal of the terminal to the premises control station; Requesting, by the premises control station, session information of a terminal for call processing of the terminal to the premises data location register according to a call connection request signal transmitted from the premises base station; The premises data location register determines whether the session information requested from the premises control station is registered in the database. If the session information of the corresponding terminal is not registered, the premises data location register determines that it is the first premises EV-DO wireless network access call. Requesting session information of a terminal from a public data location register of the public EV-DO wireless network, and receiving session information of the corresponding terminal from the public data location register; The premises data location register performs premises authentication of the terminal using the authentication information included in the session information of the received terminal, and if it is determined that the terminal is a terminal registered in the premises, the session information of the terminal is received. Transmitting to the premises control station and storing the session information in a database; The premises control station is linked with the public EV-DO wireless network comprising the step of allocating a traffic channel of the terminal according to the session information of the terminal transmitted from the premises data location register and performing data service through the assigned channel. Terminal authentication and call processing method in premises EV-DO wireless network system. The method of claim 8, In the step of transmitting the call connection request signal to the premises control station, when the terminal transmits a call connection request signal to the premises base station whether the call is a public EV-DO radio network access call to the call connection request signal in the premises EV-DO radio A terminal authentication and call processing method in an premises EV-DO wireless network system interworking with a public EV-DO wireless network that transmits by adding temporary identifier information for distinguishing whether a network access call. The method according to claim 8 or 9, Requesting session information of the terminal to the premises data location register, Temporary identifier information included in the call connection request signal transmitted from the terminal to the premises base station is analyzed by the premises control station and according to the analysis result, the call connection request signal of the public EV-DO wireless network or the premises EV-DO wireless network. A terminal authentication and call processing method in an on-premises EV-DO wireless network system interworking with a public EV-DO wireless network comprising the step of selectively routing to a data location register. The method of claim 8, In the step of receiving the session information of the terminal from the public data location register, When the session information requested from the premises control station is registered in the database, the premises data location register determines that the call connection of the corresponding terminal is not the first call connection but is at least two or more connection calls, and the database is not authenticated by the separate terminal. The terminal authentication and call processing method in the premises EV-DO wireless network system interoperating with the public EV-DO wireless network that provides the session information of the terminal stored in the control station. The method of claim 8, The authentication information is a terminal authentication and call processing method in an on-premises EV-DO wireless network system interoperating with the public EV-DO wireless network including an International Mobile Station Identity (IMSI). A terminal authentication and call processing method of an premises EV-DO wireless network system interworking with a public EV-DO wireless network system including a public data location register, When there is a call connection request from a terminal entering the premises EV-DO wireless network, determining whether the corresponding call connection is an premises EV-DO wireless network access call or a public EV-DO wireless network access call; If the call is an on-premises EV-DO wireless network access call, comparing and searching for whether session information for the terminal exists in a database; Requesting, by the public data location register located in the public EV-DO wireless network, session information of the terminal for authentication and call processing of the terminal, if the session information of the corresponding terminal does not exist in the database. ; If session information of the corresponding terminal is received from the public data location register, extracting IMSI information for authentication of the terminal included in the received session information of the corresponding terminal; Determining whether the extracted IMSI information is IMSI information of a terminal registered in an EV-DO wireless network and performing premises authentication of the corresponding terminal; When the authentication of the terminal is completed, storing the session information of the terminal in a database, assigning a traffic channel of the terminal using the session information of the terminal and performing a data service to the terminal through the assigned channel A terminal authentication and call processing method in an premises EV-DO wireless network system interworking with the public EV-DO wireless network including. The method of claim 13, In the step of comparing and searching whether the session information for the corresponding terminal exists in the database, If the session information for the terminal exists in the database, it is determined that the access call of the terminal is at least two times and the traffic channel of the terminal using the session information of the terminal stored in the database without authentication of a separate terminal Method of authenticating and calling a terminal in the premises EV-DO wireless network system interworking with the public EV-DO wireless network comprising the step of performing a data service to the terminal through the assigned channel.